Why not here, I also wonder how this is compatible with it being a cncf project.
Very interesting question. What happens if a product goes out of compliance?
It's also interesting to think about what that would even look like since part of the project being added to CNCF in the first place were the trademarks etc. got handed over too [2] - not just the code.
[1] https://www.cncf.io/archived-projects/ [2] https://www.linuxfoundation.org/legal/trademarks